Docket January 15, 2016 Board of Trustees Executive & Audit Committee Thursday, January 15, 2015
The Board of Trustees of Oregon State University 526 Kerr Administration Building Corvallis, OR 97331 PHONE: 541-737-3449 http://oregonstate.edu/leadership/trustees December 31, 2014 TO: MEMBERS OF THE BOARD OF TRUSTEES OF OREGON STATE UNIVERSITY The Executive & Audit Committee of the Board of Trustees of Oregon State University will meet on Thursday, January 15, 2015, beginning at 10:30 am. Agenda items include review and approval of the Office of Audit Services 2014 final progress report and 2015 plan and a discussion of the establishment of a presidential assessment process. The meeting will be held in accordance with the time, location, and schedule listed below: Thursday, January 15, 2015 10:30-11:30 am Willamette Room, CH2M Hill Alumni Center Oregon State University, Corvallis, Oregon If special accommodation is required, please contact Marcia Stuart at (541) 737-3449 or marcia.stuart@oregonstate.edu at least 72 hours in advance. Meeting materials for this and other meetings will be posted at http://oregonstate.edu/leadership/trustees/meetings. Sincerely, Meg Reeves Board Secretary
E&A Agenda January 15, 2016 The Board of Trustees of Oregon State University Regular Meeting of the Executive & Audit Committee January 15, 2015 10:30 am 11:30 am Willamette Room, CH2M Hill Alumni Center Oregon State University, Corvallis, Oregon AGENDA 1. Call to Order/Roll/Declaration of a Quorum (Reser) 2. Consent Agenda a. Approval of Minutes of the October 16, 2014 Meeting (Reser)... E-1 3. Action Items a. Approval of the Office of Audit Services 2014 Final Progress Report and 2015 Plan (Snopkowski)... E-3 The charter of the Oregon State University Board of Trustees Executive & Audit Committee (Committee) directs that the Committee review and approve the Office of Audit Services (OAS) plans and progress. In accordance with the charter, the OAS will present the 2014 final progress report and the 2015 annual audit plan as directed. 4. Discussion Item a. Establishment of a Presidential Assessment Process (Reser)... Mailed under separate cover 5. Adjournment Executive & Audit Committee Page E-i AGENDA
E&A Agenda January 15, 2016 (This page intentionally left blank.) Executive & Audit Committee Page E-ii AGENDA
E&A Docket January 15, 2015 The Board of Trustees of Oregon State University Meeting of the Executive & Audit Committee October 16, 2014 Robert Family Event Room, Austin Hall Oregon State University, Corvallis, Oregon MINUTES Committee Members Present: Rani Borkar, Darry Callahan (Vice Chair), Paul Kelly, Pat Reser (Chair), Ed Ray (ex officio), and Kirk Schueler Other Trustees Present: Michele Longo Eder, Orcilia Forbes, and Laura Naumes University Faculty and Staff Present: Sherm Bloomer, Dan Edge, Mark Huey, Linda Powell, Meg Reeves, Clay Simmons, Patti Snopkowski, and Marcia Stuart 1. Call to Order Committee Chair Pat Reser called the meeting to order at 9:10 a.m., asked the assistant board secretary to call the roll, and noted a quorum. 2. Consent Agenda a. Approval of Minutes of the August 28, 2014 Meeting A motion was made and seconded to approve the minutes of the August 28, 2014 committee meeting; the motion carried. 3. Action Items a. Audit Service Provider Selection Patti Snopkowski, Chief Audit Executive, described the process used to elicit proposals from audit firms. CliftonLarsonAllen, LLP (CLA) has been the auditor for the Oregon University System for the past two years, and the expenses associated with their work were significantly under budget during 2014, with the quality and price of their work giving them a competitive advantage in this search. Committee Member Kirk Schueler expressed his appreciation for the thoroughness and appropriateness of the search process and made the motion that the Committee approve the selection of CLA as the University s external auditor for the years ending June 30, 2015 and June 30, 2016 (unless otherwise terminated). The contract may be extended to perform the services for up to five additional one-year periods, for a possible total of seven audit periods ending June 30, 2021, as such services are needed. The motion was seconded and carried. b. Office of Audit Services Quarterly Progress Report, October 2014 Ms. Snopkowski described the objectives and key results during the period January to September 2014 for the Office of Audit Services (OAS). During this period, the transition from the OUS audit to the University audit was completed. Of note was the implementation of the University hotline service agreement for use with the University fraud, waste and abuse reporting policy. Working with search committees, the office Executive & Audit Committee Page E-1 Minutes, October 2014
E&A Docket January 15, 2016 successfully recruited a university senior auditor, an IT auditor and an office executive assistant. Priorities have been set for October-December 2014 and include developing a 2015 calendar year audit plan, conducting trainings on fraud awareness, evaluating the hotline marketing and branding, and finalizing the contract with CLA. A motion was made and seconded to approve the October 2014 quarterly OAS progress report. Motion carried. 4. Discussion Items a. Office of Audit Services Annual Planning Process Ms. Snopkowski described the 2015 calendar year planning process for the OAS, with the following objectives used to form the plan: reducing the risk of operational inefficiencies and ineffectiveness, increasing the reliability of financial reporting, and reinforcing the likelihood of non-compliance. b. Formal Presidential Performance Assessment Process Chair Reser drew the Committee s attention to the proposed presidential performance assessment materials provided in the full Board docket and introduced the topic.. Vice Chair Callahan urged the Committee to establish a 360-degree in-depth assessment, conducted every three to four years, to incorporate longer-term objectives. President Ray recommended reviewing best practices at peer institutions on the timing of presidential evaluations. 5. Education Item a. Internal Control at OSU COSO and Enterprise Risk Management Ms. Snopkowski described the framework provided by the Committee of Sponsoring Organizations of the Treadway Commission (COSO), which defined internal control as a process, affected by an entity s board of directors, management and other personnel, designed to provide reasonable assurance regarding the achievement of objectives (the effectiveness and efficiency of operations, the reliability of financial reporting, and compliance with applicable laws and regulations). This model is used to evaluate operations and, therefore, reported Ms. Snopkowski, is provided to OSU managers, external stakeholders, board and executive leaders, and internal auditors. Ms. Snopkowski described each of the five interrelated components of the internal control model (control environment, risk assessment, control activities, information and communication, and monitoring). In conclusion, the Committee was advised that Oregon State will continue to use and improve upon the principles of COSO to provide reasonable assurance regarding the achievement of the three stated objectives. 6. Adjournment With no further business proposed, Chair Reser adjourned the meeting at 10:35 a.m. Respectfully submitted, Mark Huey Assistant Board Secretary Executive & Audit Committee Page E-2 Minutes, October 2014
E&A Docket January 15, 2016 Approval of the Office of Audit Services 2014 Final Progress Report and 2015 Plan I. BACKGROUND As outlined in the charter of the Oregon State University Board of Trustees Executive & Audit Committee (Committee), the Office of Audit Services (OAS) is an independent, objective assurance and consulting activity designed to add value and improve the organization's operations. In order to meet this responsibility, OAS annually develops an audit plan to provide comprehensive audit coverage and deploy audit resources in an effective and efficient manner. The charter directs that the Committee review and approve the OAS plans and progress in accordance with nationally recognized auditing standards. In accordance with the charter, the OAS will present the 2014 final progress report and the 2015 annual audit plan. The audit report recommendations made over the past quarter are being adequately addressed by management. II. 2014 ACTIVITIES 2014 Calendar Year Activities Service Area Assurance Consulting Investigative Follow up External Audit Coordination Activity Developed 2015 calendar year audit plan Issued Banner security access audit report Participated in Lean process improvement initiatives Served in an advisory capacity related to fiscal cycle control analysis Administered the hotline; annual summary of reports to be included in second quarterly report Conducted fraud prevention trainings and initiated a hotline awareness campaign Followed up on all open audit recommendations issued by the Oregon University System in progress as of 6/30/14. Report in draft form; to be included in second quarterly report. Finalized contract with external CPA firm Coordinated the 6/30/2014 NCAA agreed upon fiscal procedures Served as the liaison to all external audits Joint Committee Meeting Page E-3 ACTION ITEM
E&A Docket January 15, 2016 2014 Calendar Year Activities Service Area Other Activity Completed office set up including the hiring of staff and establishing office infrastructure elements; i.e., charters and office policy and procedures Served professional associations in leadership roles and presented at regional and national conferences. Associations included the Association of College and University Auditors, the International Institute of Internal Auditors, and National Association of College and University Business Officers 4 th Quarter Reports Issued Engagement Banner Assurances Provided/Conclusions Improvements are being made to clarify roles and responsibilities over system access, eliminate conflicting access rights, and establish regular monitoring over segregation of duties in high risk areas. III. 2015 AUDIT PLAN & RESOURCES Factors considered in setting the 2015 audit priorities included the president s goals, the strategic plan, the last time audited with relative importance of operations, changes in systems or management, industry trends and events, recent incidents, external audit focus, and management input. Our assessment utilized the Internal Control-Integrated Framework components as published by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). A major portion of OAS resources is allocated to performing assurance and consulting activities. The OAS views OSU as nine major functional areas in order to ensure the plan includes comprehensive coverage across the university. The nine major functional units are: governance and leadership instruction and academic support research and development student services human resources management fiscal and asset management campus operations auxiliary operations and athletics information technology Executive & Audit Committee Page E-4 ACTION ITEM
E&A Docket January 15, 2016 The following activities are scheduled to be completed in 2015: OAS 2015 Audit Plan Service Area Assurance Consulting Investigative Follow up External Audit Coordination Activity College of Veterinary Medicine (change of leadership) INTO/international programs (change of leadership) Procurement card/personal reimbursements AP cycle, vendor set-up Department of Public Safety Clery compliance Student Health Center billing Financial Aid e-campus control verification Construction contracting *external vendor Athletics ticket system and NCAA ticket count Motor Pool operations Background checks Payroll system adjustments and effort reporting Athletics grade control verification Information security (policy, assessment, plan) Credit card standards PCI compliance Change management (Banner master data) Compliance function implementation (policy development, incident processes, and training) Participate in Lean process improvement initiatives over research pre- and post-award administration Serve in an advisory capacity related to fiscal cycle control analysis Enterprise Risk Management Administer the hotline Conduct trainings on fraud prevention and awareness Follow up on all open audit recommendations Conduct the 6/30/2015 NCAA agreed upon fiscal procedures Serve as the liaison to all external audits Executive & Audit Committee Page E-5 ACTION ITEM
E&A Docket January 15, 2016 IV. OAS RESOURCES: Five professional audit staff serve OSU. Staffing resources are benchmarked against comparable western land grant institutions to ensure adequacy with industry standards. Staff members possess a variety of specialized subject matter expertise: More than 55 years of combined professional career experience Eight Professional audit certifications 1 Certified Public Accountant (CPA) 2 Certified Internal Auditors (CIA) 2 Certified Compliance and Ethics Professionals (CCEP) 1 Certified Information Technology Professional (CITP) 1 Certified Fraud Examiner (CFE) 1 Certified Government Auditing Professional (CGAP) Staff Recommendation to the Committee Staff recommends that the Executive & Audit Committee of the Board approve the Office of Audit Services 2014 final progress report and 2015 annual audit plan. Executive & Audit Committee Page E-6 ACTION ITEM
Board of Trustees Joint Committee Meeting Thursday, January 15, 2015
The Board of Trustees of Oregon State University 526 Kerr Administration Building Corvallis, OR 97331 PHONE: 541-737-3449 http://oregonstate.edu/leadership/trustees December 31, 2014 TO: MEMBERS OF THE BOARD OF TRUSTEES OF OREGON STATE UNIVERSITY The Executive & Audit Committee and the Finance & Administration Committee of the Board of Trustees of Oregon State University will meet together on Thursday, January 15, 2015, beginning at 12:00 pm. Agenda items include the review and approval of the FY14 external auditor annual report. The meeting will be held in accordance with the time, location, and schedule listed below: Thursday, January 15, 2015 12:00-12:30 pm Willamette Room, CH2M Hill Alumni Center Oregon State University, Corvallis, Oregon If special accommodation is required, please contact Marcia Stuart at (541) 737-3449 or marcia.stuart@oregonstate.edu at least 72 hours in advance. Meeting materials for this and other meetings will be posted at http://oregonstate.edu/leadership/trustees/meetings. Sincerely, Meg Reeves Board Secretary Joint Committee Meeting
Agenda January 15, 2016 The Board of Trustees of Oregon State University Joint Meeting of the Executive & Audit and Finance & Administration Committees January 15, 2015 12:00 12:30 pm Willamette Room, CH2M Hill Alumni Center Oregon State University, Corvallis, Oregon AGENDA 1. Call to Order/Roll/Declaration of a Quorum (Reser) 2. Action Item (E&A Committee approval required) a. Review and Approval of the FY14 External Auditor Annual Report (Snopkowski, Ford)... E-7 The fiscal year ending June 30, 2014 annual financial statements were audited by CliftonLarsonAllen, LLP. An unmodified opinion was issued; i.e., their opinion as to the fair presentation of the financial statements was issued without modifications. 3. Adjournment Joint Committee Meeting Page i AGENDA
Agenda January 15, 2016 (This page intentionally left blank.) Joint Committee Meeting Page ii AGENDA
Docket January 15, 2016 Review and Approval of the FY14 External Auditor Annual Report SUMMARY The report titled Oregon State University 2014 Annual Financial Report was prepared by Oregon State University in conjunction with the University Shared Services Enterprise. The audit opinion issued by CliftonLarsonAllen, LLP, is an unmodified opinion; i.e., their opinion as to the fair presentation of the financial statements was issued without modifications. (See Exhibit 1.) As part of the financial statement audit, CliftonLarsonAllen, LLP, is required by Statement on Auditing Standards 114 (SAS 114) to communicate certain matters related to the conduct of the audit to those who have responsibility for oversight of the financial reporting process. (See Exhibit 2.) As part of the financial statement audit, CliftonLarsonAllen, LLP, is required to report on internal controls over financial reporting in accordance with Government Auditing Standards. The Independent Auditors Report on Internal Control over Financial Reporting and on Compliance and Other Matters Based on an Audit of Financial Statements Performed in Accordance with Government Auditing Standards (GAGAS Report), is included under separate cover from the 2014 Annual Financial Report. The Schedule of Findings and Responses section of this report includes a significant deficiency in the design or operation of internal control for 2014. During audit test work over Information Technology, review of segregation of duties conflicts noted that within the Banner system there were employees with incompatible access rights at Oregon State University. Management s responses and planned corrective actions are included in the report; management concurs with the recommendation and has already implemented corrective actions. (See Exhibit 3.) Staff Recommendation to the Committee Subject to the report of CliftonLarsonAllen, LLP, staff recommends that the Oregon State Board of Trustees Executive & Audit Committee accept the Oregon State University 2014 Annual Financial Report. Joint Committee Meeting Page E-7 ACTION ITEM
Docket January 15, 2016 (This page intentionally left blank.) Joint Committee Meeting Page E-8 ACTION ITEM